Network Analysis
IP Address | Status | Action | VT | Location |
---|---|---|---|---|
No hosts contacted. |
Name | Response | Post-Analysis Lookup |
---|---|---|
No hosts contacted. |
No traffic
No traffic
No traffic
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
Flow | SID | Message |
---|---|---|
TCP 192.168.168.225:49232 -> 199.71.214.87:6667 | 2002028 | ET CHAT IRC PONG response |
TCP 192.168.168.225:49235 -> 199.71.214.87:6667 | 2002028 | ET CHAT IRC PONG response |
TCP 192.168.168.225:49236 -> 199.71.214.87:6667 | 2002028 | ET CHAT IRC PONG response |
TCP 199.71.214.87:6667 -> 192.168.168.225:49238 | 2812135 | ETPRO POLICY Possible IRC Botnet Activity - Throttled Connection |